cbcvebase.

Sendmachine For Wordpress vulnerabilities

1 known vulnerability affecting sendmachine/sendmachine_for_wordpress.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-6235P2CRITICALCVSS 9.8≤ 1.0.202026-04-22
CVE-2026-6235 [CRITICAL] CWE-862 CVE-2026-6235: The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'ma The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to overwrite the plugin's
nvd
Sendmachine For Wordpress vulnerabilities | cvebase